Hello Selva, > Sent: Saturday, December 17, 2016 at 1:23 AM > From: "Selva Nair" <[email protected]> > To: "Jan Just Keijser" <[email protected]> > Cc: "Sebastian Rubenstein" <[email protected]>, "openvpn users list (openvpn- > [email protected])" <[email protected]> > Subject: Re: [Openvpn-users] Keywords to look for that may indicate a VPN > provider is providing strong > encryption/decryption? > > > The client config would include the ca certificate (and, I think, all > intermediate certs as well) either > as inline or as a separate file. So one > could manually check the certificates. As for the server cert, > you could use > --tls-verify some-script.sh > --tls-export-cert directory > in the config. These options do work on clients though more commonly used on > servers. The script can then > access each certificate at the path given in > peer_cert env variable and use /usr/bin/openssl to find key size etc... See > the man page for details about those options.
I surfed to https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage and the whole manual is just too technical for me. If you have time to spare, would it be possible for you to provide: 1. an example of "some-script.sh"? What are its contents? 2. an example of "directory"? Did you mean the location of the directory where the certificate(s) are on the server? Thanks. Sebastian ------------------------------------------------------------------------------ Developer Access Program for Intel Xeon Phi Processors Access to Intel Xeon Phi processor-based developer platforms. With one year of Intel Parallel Studio XE. Training and support from Colfax. Order your platform today.http://sdm.link/intel _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
